last executing test programs: 2.032708687s ago: executing program 2 (id=949): syz_open_dev$usbmon(0x0, 0x3, 0x200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.873463439s ago: executing program 2 (id=945): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='`', &(0x7f0000000380)='$\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)="6ed4", 0x2) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) close(r0) 1.586035914s ago: executing program 2 (id=948): syz_open_dev$sg(0x0, 0x0, 0x6a0281) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r3, 0x0, 0x800000009) 1.367064098s ago: executing program 3 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x6}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 1.316076968s ago: executing program 2 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 1.269374979s ago: executing program 1 (id=952): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bind$can_raw(r0, &(0x7f0000000380)={0x1d, r3}, 0x10) 1.23616737s ago: executing program 4 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xf, 0x5, "5a4e526fe751ea074bb997"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.197275721s ago: executing program 3 (id=954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000844) 1.103992812s ago: executing program 1 (id=956): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x3) 1.090554232s ago: executing program 0 (id=957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x940, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.046303383s ago: executing program 3 (id=958): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/sys/net/\x00\x00\f\x89\xe2T\a\xcdu`\'a\xec\x97\x0f\xf0j\x00l'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f00000002c0)='./bus\x00', 0x6c2ac2, 0x11) 1.045151293s ago: executing program 0 (id=959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 988.454264ms ago: executing program 1 (id=960): ioperm(0x0, 0x6, 0xd644) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x8) 987.723004ms ago: executing program 4 (id=961): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 982.655994ms ago: executing program 0 (id=962): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812fff7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 964.755914ms ago: executing program 3 (id=963): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000ac0)="cc14b341", 0x4, 0xc804, &(0x7f0000000200)={0xa, 0x4e22, 0x487000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={r2}, &(0x7f0000000400)=0x8) 921.334185ms ago: executing program 0 (id=964): socket$inet_smc(0x2b, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 913.755215ms ago: executing program 4 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r1, 0xffffffffffffffff, 0x0) 868.733726ms ago: executing program 3 (id=966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 855.758036ms ago: executing program 4 (id=967): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bind$can_raw(r0, &(0x7f0000000380)={0x1d, r3}, 0x10) 762.162908ms ago: executing program 3 (id=968): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) fsmount(r0, 0x0, 0x44) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 398.700723ms ago: executing program 2 (id=969): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 277.452625ms ago: executing program 2 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_usbip_server_init(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) 273.967045ms ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 198.802646ms ago: executing program 4 (id=972): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000580)=r2, 0x4) 174.285747ms ago: executing program 1 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 54.373239ms ago: executing program 1 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 53.881329ms ago: executing program 0 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfdfb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x18) listen(r1, 0x3) 16.53254ms ago: executing program 1 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r2, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) 0s ago: executing program 0 (id=977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) shutdown(r2, 0x1) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 31.430257][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 31.430277][ T30] audit: type=1400 audit(1749575659.996:57): avc: denied { transition } for pid=3186 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.468100][ T30] audit: type=1400 audit(1749575659.996:58): avc: denied { noatsecure } for pid=3186 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.496530][ T30] audit: type=1400 audit(1749575660.006:59): avc: denied { write } for pid=3186 comm="sh" path="pipe:[995]" dev="pipefs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.524592][ T30] audit: type=1400 audit(1749575660.006:60): avc: denied { rlimitinh } for pid=3186 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.548908][ T30] audit: type=1400 audit(1749575660.006:61): avc: denied { siginh } for pid=3186 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 41.003037][ T30] audit: type=1400 audit(1749575669.576:62): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.004271][ T3297] cgroup: Unknown subsys name 'net' [ 41.033979][ T30] audit: type=1400 audit(1749575669.576:63): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.069292][ T30] audit: type=1400 audit(1749575669.616:64): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.212597][ T3297] cgroup: Unknown subsys name 'cpuset' [ 41.219905][ T3297] cgroup: Unknown subsys name 'rlimit' [ 41.371061][ T30] audit: type=1400 audit(1749575669.936:65): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.405383][ T30] audit: type=1400 audit(1749575669.946:66): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.431462][ T30] audit: type=1400 audit(1749575669.946:67): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.462772][ T30] audit: type=1400 audit(1749575669.946:68): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.487043][ T30] audit: type=1400 audit(1749575669.946:69): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.504372][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 41.529058][ T30] audit: type=1400 audit(1749575669.946:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 41.573422][ T30] audit: type=1400 audit(1749575670.116:71): avc: denied { relabelto } for pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.609360][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.872311][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 43.022568][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.031303][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.042554][ T3312] bridge_slave_0: entered allmulticast mode [ 43.049511][ T3312] bridge_slave_0: entered promiscuous mode [ 43.057904][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 43.079072][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 43.089540][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.101448][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.110385][ T3312] bridge_slave_1: entered allmulticast mode [ 43.119473][ T3312] bridge_slave_1: entered promiscuous mode [ 43.178483][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.220580][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.243414][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 43.261010][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 43.308882][ T3312] team0: Port device team_slave_0 added [ 43.330199][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.342498][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.350824][ T3308] bridge_slave_0: entered allmulticast mode [ 43.368399][ T3308] bridge_slave_0: entered promiscuous mode [ 43.382563][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.390573][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.399212][ T3309] bridge_slave_0: entered allmulticast mode [ 43.407030][ T3309] bridge_slave_0: entered promiscuous mode [ 43.415358][ T3312] team0: Port device team_slave_1 added [ 43.441821][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.452202][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.462217][ T3308] bridge_slave_1: entered allmulticast mode [ 43.472126][ T3308] bridge_slave_1: entered promiscuous mode [ 43.479152][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.486729][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.498268][ T3309] bridge_slave_1: entered allmulticast mode [ 43.509396][ T3309] bridge_slave_1: entered promiscuous mode [ 43.553010][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.562144][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.594353][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.646015][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.658023][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.666774][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.703021][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.720632][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.732072][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.740998][ T3313] bridge_slave_0: entered allmulticast mode [ 43.749370][ T3313] bridge_slave_0: entered promiscuous mode [ 43.757348][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.765719][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.774131][ T3318] bridge_slave_0: entered allmulticast mode [ 43.781738][ T3318] bridge_slave_0: entered promiscuous mode [ 43.791395][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.802727][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.812595][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.821064][ T3318] bridge_slave_1: entered allmulticast mode [ 43.831459][ T3318] bridge_slave_1: entered promiscuous mode [ 43.841180][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.866603][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.874984][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.887637][ T3313] bridge_slave_1: entered allmulticast mode [ 43.895699][ T3313] bridge_slave_1: entered promiscuous mode [ 43.909076][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.935745][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.999486][ T3309] team0: Port device team_slave_0 added [ 44.020289][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.051435][ T3308] team0: Port device team_slave_0 added [ 44.060037][ T3308] team0: Port device team_slave_1 added [ 44.069959][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.083537][ T3309] team0: Port device team_slave_1 added [ 44.101649][ T3312] hsr_slave_0: entered promiscuous mode [ 44.115074][ T3312] hsr_slave_1: entered promiscuous mode [ 44.137469][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.156923][ T3318] team0: Port device team_slave_0 added [ 44.166883][ T3318] team0: Port device team_slave_1 added [ 44.207322][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.219013][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.256373][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.279390][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.288600][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.323068][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.355301][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.366472][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.409661][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.424798][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.434731][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.466474][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.484914][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.496159][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.529980][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.547582][ T3313] team0: Port device team_slave_0 added [ 44.569945][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.585972][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.629488][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.656458][ T3313] team0: Port device team_slave_1 added [ 44.704208][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.719838][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.770607][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.791929][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.806495][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.836309][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.884400][ T3309] hsr_slave_0: entered promiscuous mode [ 44.897009][ T3309] hsr_slave_1: entered promiscuous mode [ 44.903979][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.917276][ T3309] Cannot create hsr debugfs directory [ 44.963877][ T3308] hsr_slave_0: entered promiscuous mode [ 44.980251][ T3308] hsr_slave_1: entered promiscuous mode [ 44.989258][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.007927][ T3308] Cannot create hsr debugfs directory [ 45.041356][ T3318] hsr_slave_0: entered promiscuous mode [ 45.048578][ T3318] hsr_slave_1: entered promiscuous mode [ 45.060228][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.074272][ T3318] Cannot create hsr debugfs directory [ 45.106584][ T3313] hsr_slave_0: entered promiscuous mode [ 45.116948][ T3313] hsr_slave_1: entered promiscuous mode [ 45.123870][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.134459][ T3313] Cannot create hsr debugfs directory [ 45.373125][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.392786][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.419202][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.435510][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.466713][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.480479][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.507752][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.521415][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.543760][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.553880][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.585824][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.604019][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.621588][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.641173][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.653582][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.680239][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.698052][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.744953][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.758865][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.779093][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.793124][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.814779][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.842337][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.851986][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.894315][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.904542][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.946906][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.975771][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.000489][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.020877][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.058365][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.074103][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.103624][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.114181][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.123434][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.137122][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.146706][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.162668][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.173109][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.204625][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.240084][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.254483][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.268848][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.285506][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.296995][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.347310][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.359091][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.379056][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.388279][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.412180][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.420673][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.497693][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.559047][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.611672][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.677587][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.691487][ T3312] veth0_vlan: entered promiscuous mode [ 46.719528][ T3312] veth1_vlan: entered promiscuous mode [ 46.746329][ T3309] veth0_vlan: entered promiscuous mode [ 46.778430][ T3312] veth0_macvtap: entered promiscuous mode [ 46.798163][ T3309] veth1_vlan: entered promiscuous mode [ 46.811532][ T3312] veth1_macvtap: entered promiscuous mode [ 46.822566][ T3308] veth0_vlan: entered promiscuous mode [ 46.840195][ T3309] veth0_macvtap: entered promiscuous mode [ 46.863722][ T3308] veth1_vlan: entered promiscuous mode [ 46.882673][ T3309] veth1_macvtap: entered promiscuous mode [ 46.900716][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.919097][ T3313] veth0_vlan: entered promiscuous mode [ 46.931109][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.952276][ T3313] veth1_vlan: entered promiscuous mode [ 46.964238][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.973711][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.984038][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.996307][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.010447][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.022274][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.041473][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.051940][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.063337][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.074772][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.088285][ T3308] veth0_macvtap: entered promiscuous mode [ 47.103966][ T3308] veth1_macvtap: entered promiscuous mode [ 47.127679][ T3318] veth0_vlan: entered promiscuous mode [ 47.135008][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 47.135027][ T30] audit: type=1400 audit(1749575675.696:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.fJMwTI/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 47.181517][ T30] audit: type=1400 audit(1749575675.696:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.222039][ T30] audit: type=1400 audit(1749575675.696:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.fJMwTI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.257537][ T30] audit: type=1400 audit(1749575675.696:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.289840][ T30] audit: type=1400 audit(1749575675.696:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.fJMwTI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.326394][ T30] audit: type=1400 audit(1749575675.696:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.fJMwTI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 47.369002][ T30] audit: type=1400 audit(1749575675.706:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.411537][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.412459][ T30] audit: type=1400 audit(1749575675.706:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.441101][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.465624][ T30] audit: type=1400 audit(1749575675.706:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 47.513060][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.531144][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.540728][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.550771][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.560673][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.580723][ T30] audit: type=1400 audit(1749575676.146:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.614807][ T3318] veth1_vlan: entered promiscuous mode [ 47.632507][ T3313] veth0_macvtap: entered promiscuous mode [ 47.655323][ T3313] veth1_macvtap: entered promiscuous mode [ 47.681215][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.695126][ T3479] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.710911][ T3479] x_tables: duplicate underflow at hook 1 [ 47.723077][ T3318] veth0_macvtap: entered promiscuous mode [ 47.737858][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.762685][ T3318] veth1_macvtap: entered promiscuous mode [ 47.787366][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.799615][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.809691][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.819190][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.844967][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.858095][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.885658][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.896607][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.907068][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.917345][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.067101][ T3500] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 48.099224][ T3500] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 48.351472][ T3524] netdevsim netdevsim1: Direct firmware load for „ failed with error -2 [ 48.387510][ T3520] loop0: detected capacity change from 0 to 4096 [ 48.442970][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.471609][ T3529] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.594287][ T3541] bridge0: port 3(syz_tun) entered blocking state [ 48.602452][ T3541] bridge0: port 3(syz_tun) entered disabled state [ 48.626760][ T3541] syz_tun: entered allmulticast mode [ 48.637774][ T3541] syz_tun: entered promiscuous mode [ 48.647418][ T3541] bridge0: port 3(syz_tun) entered blocking state [ 48.656316][ T3541] bridge0: port 3(syz_tun) entered forwarding state [ 48.938660][ T3565] loop2: detected capacity change from 0 to 1024 [ 48.992866][ T3568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.008662][ T3565] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 49.020663][ T3565] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 49.037813][ T3568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.049090][ T3565] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 49.070024][ T3565] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.38: unexpected bad inode w/o EXT4_IGET_BAD [ 49.089215][ T3565] EXT4-fs (loop2): no journal found [ 49.095608][ T3565] EXT4-fs (loop2): can't get journal size [ 49.103727][ T3565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.137254][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.323730][ T3585] Zero length message leads to an empty skb [ 49.605790][ T3590] netlink: 'syz.1.48': attribute type 4 has an invalid length. [ 49.738326][ T3598] netlink: 'syz.1.51': attribute type 6 has an invalid length. [ 49.748160][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 49.792886][ T3600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4371 sclass=netlink_route_socket pid=3600 comm=syz.4.52 [ 49.817753][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 49.852217][ T3605] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 49.852217][ T3605] program syz.1.54 not setting count and/or reply_len properly [ 49.970282][ T3611] netlink: 112 bytes leftover after parsing attributes in process `syz.1.57'. [ 49.983893][ T3613] netlink: 87 bytes leftover after parsing attributes in process `syz.4.58'. [ 50.052679][ T3616] Cannot find add_set index 0 as target [ 50.232397][ T3622] bridge_slave_0: left allmulticast mode [ 50.239651][ T3622] bridge_slave_0: left promiscuous mode [ 50.247256][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.294776][ T3622] bridge_slave_1: left allmulticast mode [ 50.301484][ T3622] bridge_slave_1: left promiscuous mode [ 50.309870][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.328556][ T3622] bond0: (slave bond_slave_0): Releasing backup interface [ 50.356870][ T3622] bond0: (slave bond_slave_1): Releasing backup interface [ 50.370875][ T3622] team0: Port device team_slave_0 removed [ 50.383188][ T3622] team0: Port device team_slave_1 removed [ 50.396664][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.405869][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.434924][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.450233][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.768747][ T3622] syz.2.62 (3622) used greatest stack depth: 10880 bytes left [ 50.894083][ T3648] lo: entered promiscuous mode [ 50.922800][ T3648] tunl0: entered promiscuous mode [ 50.952674][ T3648] gre0: entered promiscuous mode [ 50.960831][ T3648] gretap0: entered promiscuous mode [ 50.968099][ C1] hrtimer: interrupt took 1241135 ns [ 50.986871][ T3648] erspan0: entered promiscuous mode [ 51.003936][ T3648] ip_vti0: entered promiscuous mode [ 51.033340][ T3648] ip6_vti0: entered promiscuous mode [ 51.043726][ T3648] sit0: entered promiscuous mode [ 51.060083][ T3648] ip6tnl0: entered promiscuous mode [ 51.087929][ T3648] ip6gre0: entered promiscuous mode [ 51.097831][ T3648] syz_tun: entered promiscuous mode [ 51.119417][ T3648] ip6gretap0: entered promiscuous mode [ 51.128975][ T3648] bridge0: entered promiscuous mode [ 51.138583][ T3648] vcan0: entered promiscuous mode [ 51.154700][ T3664] mmap: syz.1.76 (3664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.169683][ T3648] bond0: entered promiscuous mode [ 51.177689][ T3648] team0: entered promiscuous mode [ 51.189050][ T3648] dummy0: entered promiscuous mode [ 51.196077][ T3648] nlmon0: entered promiscuous mode [ 51.206079][ T3648] caif0: entered promiscuous mode [ 51.211530][ T3648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.301910][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.960637][ T3688] loop2: detected capacity change from 0 to 256 [ 51.990245][ T3688] FAT-fs (loop2): bogus number of FAT sectors [ 52.004302][ T3688] FAT-fs (loop2): Can't find a valid FAT filesystem [ 52.373219][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 52.373237][ T30] audit: type=1400 audit(1749575680.946:200): avc: denied { create } for pid=3702 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.431510][ T30] audit: type=1400 audit(1749575680.986:201): avc: denied { bind } for pid=3702 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.456613][ T30] audit: type=1400 audit(1749575680.986:202): avc: denied { listen } for pid=3702 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.481298][ T30] audit: type=1400 audit(1749575680.986:203): avc: denied { connect } for pid=3702 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.503870][ T30] audit: type=1400 audit(1749575680.986:204): avc: denied { setopt } for pid=3702 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.648228][ T3718] loop1: detected capacity change from 0 to 1024 [ 52.662615][ T3718] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.675403][ T3718] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.695179][ T3718] JBD2: no valid journal superblock found [ 52.703314][ T3718] EXT4-fs (loop1): Could not load journal inode [ 52.735573][ T3718] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 52.761793][ T30] audit: type=1400 audit(1749575681.316:205): avc: denied { ioctl } for pid=3720 comm="syz.3.99" path="socket:[4582]" dev="sockfs" ino=4582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.796280][ T30] audit: type=1400 audit(1749575681.316:206): avc: denied { connect } for pid=3720 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.818354][ T30] audit: type=1400 audit(1749575681.316:207): avc: denied { write } for pid=3720 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.891769][ T30] audit: type=1326 audit(1749575681.446:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.1.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f442fc2e929 code=0x0 [ 53.006293][ T30] audit: type=1400 audit(1749575681.576:209): avc: denied { write } for pid=3727 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.094362][ T3732] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 53.362319][ T3746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.449972][ T3750] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 53.465546][ T3750] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 53.499551][ T3752] netlink: 'syz.4.113': attribute type 3 has an invalid length. [ 53.535480][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.544985][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.554146][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.565827][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.577540][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.587841][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.598128][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.607327][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.616880][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.625467][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.634443][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.642705][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.651447][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.662099][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.675765][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.685208][ T2959] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 53.696671][ T2959] hid-generic 0006:0000:0000.0001: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 53.760718][ T3758] fido_id[3758]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.298928][ T3787] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 55.359022][ T3833] SELinux: Context Ü is not valid (left unmapped). [ 55.373020][ T3835] loop3: detected capacity change from 0 to 256 [ 55.464877][ T3835] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.580832][ T3844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.616562][ T3847] Illegal XDP return value 3146585048 on prog (id 98) dev N/A, expect packet loss! [ 55.616689][ T3848] loop3: detected capacity change from 0 to 128 [ 55.687889][ T3844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.703229][ T3848] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 550) [ 55.713429][ T3848] FAT-fs (loop3): Filesystem has been set read-only [ 55.746260][ T3312] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 550) [ 55.757805][ T3855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.829288][ T3858] vhci_hcd: invalid port number 96 [ 55.835889][ T3858] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 55.847188][ T3844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.888511][ T3863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 55.934838][ T3844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.010554][ T3844] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.024854][ T3844] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.039382][ T3844] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.061643][ T3844] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.183510][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x1 [ 56.197797][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.214440][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.225260][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.235810][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.245071][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.253243][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x2 [ 56.255630][ T3844] syz.1.152 (3844) used greatest stack depth: 10872 bytes left [ 56.262583][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.281050][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.289502][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x4 [ 56.297464][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.306552][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.315856][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.324698][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.333709][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x2 [ 56.341986][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.351460][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.360018][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.368108][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.378239][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.388437][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.397669][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.406775][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.415158][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.423278][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.431635][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.441344][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.450131][ T1036] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 56.461844][ T1036] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 56.484393][ T3878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 56.496513][ T3878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'. [ 56.507464][ T3878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 56.535522][ T3881] fido_id[3881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.551241][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 56.580376][ T3878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 56.787926][ T3904] loop2: detected capacity change from 0 to 512 [ 56.811251][ T3904] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.829113][ T3904] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.845938][ T3904] EXT4-fs (loop2): 1 truncate cleaned up [ 56.863052][ T3911] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.179'. [ 56.892335][ T3904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.942422][ T3907] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.179'. [ 56.961538][ T3914] netlink: 332 bytes leftover after parsing attributes in process `syz.4.182'. [ 56.974973][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.029987][ T3916] ref_ctr_offset mismatch. inode: 0xdb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 57.428070][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 57.428085][ T30] audit: type=1400 audit(1749575685.996:294): avc: denied { append } for pid=3955 comm="syz.2.201" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.461406][ T30] audit: type=1400 audit(1749575685.996:295): avc: denied { open } for pid=3955 comm="syz.2.201" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.461510][ T3956] random: crng reseeded on system resumption [ 57.535169][ T30] audit: type=1400 audit(1749575686.106:296): avc: denied { write } for pid=3953 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 57.585947][ T30] audit: type=1326 audit(1749575686.136:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 57.615598][ T30] audit: type=1326 audit(1749575686.136:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 57.644742][ T30] audit: type=1326 audit(1749575686.136:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 57.671470][ T30] audit: type=1326 audit(1749575686.136:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 57.704022][ T30] audit: type=1326 audit(1749575686.136:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 57.734439][ T30] audit: type=1326 audit(1749575686.136:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 57.761358][ T30] audit: type=1326 audit(1749575686.146:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 57.986701][ T3980] loop3: detected capacity change from 0 to 512 [ 57.997774][ T3980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.013119][ T3980] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.033140][ T3980] EXT4-fs (loop3): 1 truncate cleaned up [ 58.040165][ T3980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.073741][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.124343][ T3988] loop3: detected capacity change from 0 to 128 [ 58.656382][ T4017] SELinux: failed to load policy [ 58.716132][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 58.817354][ T4033] syz.4.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.930984][ T4040] vhci_hcd: invalid port number 0 [ 58.955513][ T4042] bond1: entered promiscuous mode [ 58.962467][ T4042] bond1: entered allmulticast mode [ 58.972984][ T4042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.984756][ T4045] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 59.093999][ T4055] loop2: detected capacity change from 0 to 256 [ 59.134847][ T4055] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 59.148609][ T4055] FAT-fs (loop2): Filesystem has been set read-only [ 59.197358][ T3309] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 59.369868][ T4073] xt_CT: No such helper "pptp" [ 59.628116][ T4085] process 'syz.3.251' launched './file0' with NULL argv: empty string added [ 59.931614][ T4103] capability: warning: `syz.0.259' uses deprecated v2 capabilities in a way that may be insecure [ 60.090737][ T4109] capability: warning: `syz.0.262' uses 32-bit capabilities (legacy support in use) [ 60.138017][ T4109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4109 comm=syz.0.262 [ 60.161274][ T4113] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.161274][ T4113] program syz.1.265 not setting count and/or reply_len properly [ 60.290168][ T4124] netlink: 'syz.3.269': attribute type 2 has an invalid length. [ 60.299015][ T4124] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 60.301961][ T4126] raw_sendmsg: syz.4.270 forgot to set AF_INET. Fix it! [ 60.571563][ T4149] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 60.586837][ T4150] serio: Serial port ptm0 [ 60.684243][ T36] IPVS: starting estimator thread 0... [ 60.741872][ T4152] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 60.802889][ T4156] IPVS: using max 2112 ests per chain, 105600 per kthread [ 60.939197][ T4171] __nla_validate_parse: 5 callbacks suppressed [ 60.939213][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 61.284329][ T4179] sd 0:0:1:0: device reset [ 61.588304][ T4201] netlink: 340 bytes leftover after parsing attributes in process `syz.4.303'. [ 61.612730][ T4200] vhci_hcd: invalid port number 96 [ 61.618282][ T4200] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 61.639491][ T4205] pim6reg: entered allmulticast mode [ 61.670785][ T4207] loop4: detected capacity change from 0 to 512 [ 61.677511][ T4205] pim6reg: left allmulticast mode [ 61.727081][ T4207] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 61.764304][ T4207] EXT4-fs (loop4): invalid journal inode [ 61.770559][ T4207] EXT4-fs (loop4): can't get journal size [ 61.813030][ T4207] EXT4-fs (loop4): 1 truncate cleaned up [ 61.853887][ T4207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.219369][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.359181][ T4266] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 62.418777][ T4269] SELinux: failed to load policy [ 62.491713][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 62.491731][ T30] audit: type=1400 audit(1749575691.056:446): avc: denied { mounton } for pid=4278 comm="syz.1.321" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 62.544451][ T30] audit: type=1400 audit(1749575691.066:447): avc: denied { write } for pid=4277 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.768372][ T30] audit: type=1400 audit(1749575691.336:448): avc: denied { create } for pid=4314 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.798654][ T30] audit: type=1400 audit(1749575691.366:449): avc: denied { read } for pid=4314 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.823449][ T4325] loop1: detected capacity change from 0 to 128 [ 62.945956][ T30] audit: type=1326 audit(1749575691.516:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b6fe929 code=0x7ffc0000 [ 62.973058][ T30] audit: type=1326 audit(1749575691.516:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b6fe929 code=0x7ffc0000 [ 63.178950][ T30] audit: type=1326 audit(1749575691.576:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f991b6fe929 code=0x7ffc0000 [ 63.207046][ T30] audit: type=1326 audit(1749575691.576:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b6fe929 code=0x7ffc0000 [ 63.257545][ T30] audit: type=1326 audit(1749575691.576:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b6fe929 code=0x7ffc0000 [ 63.305770][ T30] audit: type=1326 audit(1749575691.576:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f991b6fe929 code=0x7ffc0000 [ 63.440517][ T4344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.451234][ T4344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.485605][ T4345] ref_ctr_offset mismatch. inode: 0x1ea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 63.903019][ T4373] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 63.938860][ T4373] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 63.950547][ T4373] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 63.978487][ T4373] bond1: (slave wireguard0): making interface the new active one [ 64.003461][ T4373] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 64.290528][ T4412] ======================================================= [ 64.290528][ T4412] WARNING: The mand mount option has been deprecated and [ 64.290528][ T4412] and is ignored by this kernel. Remove the mand [ 64.290528][ T4412] option from the mount to silence this warning. [ 64.290528][ T4412] ======================================================= [ 64.323020][ T4414] syzkaller0: entered promiscuous mode [ 64.338752][ T4414] syzkaller0: entered allmulticast mode [ 64.522530][ T4430] ipvlan2: entered promiscuous mode [ 64.531368][ T4430] bridge0: port 3(ipvlan2) entered blocking state [ 64.539407][ T4430] bridge0: port 3(ipvlan2) entered disabled state [ 64.555320][ T4430] ipvlan2: entered allmulticast mode [ 64.562142][ T4430] bridge0: entered allmulticast mode [ 64.571098][ T4430] ipvlan2: left allmulticast mode [ 64.579169][ T4430] bridge0: left allmulticast mode [ 64.630396][ T4439] all: renamed from lo (while UP) [ 65.114202][ T4479] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.397'. [ 65.326895][ T4503] ipip0: entered promiscuous mode [ 65.335976][ T4504] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 65.335976][ T4504] The task syz.4.404 (4504) triggered the difference, watch for misbehavior. [ 65.492724][ T4513] loop1: detected capacity change from 0 to 512 [ 65.500375][ T4511] syz.2.411 (4511) used greatest stack depth: 9384 bytes left [ 65.571644][ T4513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.620764][ T4513] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.811948][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.002290][ T4548] SELinux: failed to load policy [ 66.186185][ T4559] loop1: detected capacity change from 0 to 512 [ 66.210302][ T4559] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 66.242783][ T4559] EXT4-fs (loop1): invalid journal inode [ 66.249213][ T4559] EXT4-fs (loop1): can't get journal size [ 66.299761][ T4559] EXT4-fs (loop1): 1 truncate cleaned up [ 66.317252][ T4559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.853032][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 66.885367][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.979546][ T4572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.030211][ T4533] loop2: detected capacity change from 0 to 1024 [ 67.031296][ T4579] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.440'. [ 67.060909][ T4533] EXT4-fs: Ignoring removed orlov option [ 67.080296][ T4533] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 67.138292][ T4533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.218387][ T4592] SELinux: failed to load policy [ 67.410315][ T4602] loop1: detected capacity change from 0 to 256 [ 67.448391][ T4602] FAT-fs (loop1): bogus number of FAT sectors [ 67.455307][ T4602] FAT-fs (loop1): Can't find a valid FAT filesystem [ 67.701691][ T4615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4615 comm=syz.4.453 [ 67.725402][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 67.725424][ T30] audit: type=1400 audit(1749576464.560:596): avc: denied { map } for pid=4616 comm="syz.1.455" path="socket:[7976]" dev="sockfs" ino=7976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.761094][ T30] audit: type=1400 audit(1749576464.560:597): avc: denied { read } for pid=4616 comm="syz.1.455" path="socket:[7976]" dev="sockfs" ino=7976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.909739][ T30] audit: type=1400 audit(1749576464.761:598): avc: denied { write } for pid=4622 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.394634][ T4645] loop4: detected capacity change from 0 to 1024 [ 68.408962][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 68.509892][ T4645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.534710][ T4645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.709003][ T4651] loop1: detected capacity change from 0 to 512 [ 68.816053][ T4651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.871796][ T4651] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.915914][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.979120][ T30] audit: type=1326 audit(1749576465.892:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442fc2e929 code=0x7ffc0000 [ 69.104478][ T30] audit: type=1326 audit(1749576465.892:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442fc2e929 code=0x7ffc0000 [ 69.130939][ T30] audit: type=1326 audit(1749576465.892:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f442fc2e929 code=0x7ffc0000 [ 69.162752][ T30] audit: type=1326 audit(1749576465.892:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442fc2e929 code=0x7ffc0000 [ 69.190345][ T30] audit: type=1326 audit(1749576465.892:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f442fc2e929 code=0x7ffc0000 [ 69.203269][ T4661] SELinux: syz.1.470 (4661) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 69.218410][ T30] audit: type=1400 audit(1749576465.892:604): avc: denied { relabelfrom } for pid=4656 comm="syz.1.468" name="" dev="pipefs" ino=8043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 69.218446][ T30] audit: type=1326 audit(1749576465.892:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442fc2e929 code=0x7ffc0000 [ 69.701096][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 70.062432][ T4693] loop1: detected capacity change from 0 to 1024 [ 70.127842][ T4693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.284168][ T4693] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.483: Allocating blocks 449-513 which overlap fs metadata [ 70.357091][ T4691] EXT4-fs (loop1): pa ffff888106aa30e0: logic 48, phys. 177, len 21 [ 70.367968][ T4691] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 70.483641][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.526087][ T4560] syz.4.429 (4560) used greatest stack depth: 7264 bytes left [ 70.575254][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.700800][ T4710] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 70.708790][ T4710] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.717860][ T4710] vhci_hcd vhci_hcd.0: Device attached [ 70.755646][ T4710] program syz.1.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.798279][ T4711] vhci_hcd: connection closed [ 70.798508][ T12] vhci_hcd: stop threads [ 70.808650][ T12] vhci_hcd: release socket [ 70.813793][ T12] vhci_hcd: disconnect device [ 70.859898][ T4642] syz.4.464 (4642) used greatest stack depth: 5656 bytes left [ 71.010381][ T4734] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 72.013121][ T4798] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 72.022274][ T4798] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 72.043681][ T4800] loop2: detected capacity change from 0 to 512 [ 72.064742][ T4800] EXT4-fs: Ignoring removed orlov option [ 72.141691][ T4800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.191898][ T4800] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.236382][ T4800] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.528: corrupted xattr block 33: overlapping e_value [ 72.308622][ T4800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 72.362424][ T4800] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.528: corrupted xattr block 33: overlapping e_value [ 72.407524][ T4800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 72.429789][ T4800] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.528: corrupted xattr block 33: overlapping e_value [ 72.464114][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 72.464132][ T30] audit: type=1326 audit(1749576469.570:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.476413][ T4800] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 72.497487][ T30] audit: type=1326 audit(1749576469.570:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.534147][ T30] audit: type=1326 audit(1749576469.570:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.563622][ T30] audit: type=1326 audit(1749576469.570:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.592531][ T30] audit: type=1326 audit(1749576469.570:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.621119][ T30] audit: type=1326 audit(1749576469.570:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.655147][ T30] audit: type=1326 audit(1749576469.570:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.682333][ T30] audit: type=1326 audit(1749576469.570:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.711992][ T30] audit: type=1326 audit(1749576469.570:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.745726][ T30] audit: type=1326 audit(1749576469.570:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.4.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a560e929 code=0x7ffc0000 [ 72.826836][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.963220][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 73.277580][ T4843] loop1: detected capacity change from 0 to 512 [ 73.372574][ T4843] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.427946][ T4843] EXT4-fs (loop1): mount failed [ 73.715658][ T4885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4885 comm=syz.0.561 [ 73.799096][ T4877] syzkaller0: entered promiscuous mode [ 73.805246][ T4877] syzkaller0: entered allmulticast mode [ 73.860929][ T4891] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 73.935892][ T4897] netlink: 'syz.1.564': attribute type 5 has an invalid length. [ 74.163138][ T4914] loop1: detected capacity change from 0 to 512 [ 74.195890][ T4914] EXT4-fs: Ignoring removed bh option [ 74.209640][ T4914] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.237909][ T4914] EXT4-fs (loop1): 1 truncate cleaned up [ 74.244629][ T4914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.325438][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.378960][ T4930] sd 0:0:1:0: device reset [ 74.428464][ T4935] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 74.527323][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.570533][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.586127][ T4947] pim6reg1: entered promiscuous mode [ 74.595792][ T4947] pim6reg1: entered allmulticast mode [ 74.784215][ T4963] loop2: detected capacity change from 0 to 1024 [ 74.789842][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 74.826231][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.841945][ T4963] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.860448][ T4973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.872602][ T4973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.894873][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.920057][ T4978] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 75.092928][ T4992] netlink: 'syz.2.605': attribute type 13 has an invalid length. [ 75.123680][ T4994] atomic_op ffff888123fab128 conn xmit_atomic 0000000000000000 [ 75.304771][ T4992] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.318952][ T4992] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.333218][ T4992] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.344266][ T4992] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.521264][ T5011] netlink: 196 bytes leftover after parsing attributes in process `syz.4.614'. [ 75.655221][ T5025] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.620'. [ 75.793012][ T5044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 75.862538][ T5051] netlink: 96 bytes leftover after parsing attributes in process `syz.4.633'. [ 76.844645][ T5086] syz.1.649 uses obsolete (PF_INET,SOCK_PACKET) [ 77.006066][ T5097] vhci_hcd: invalid port number 96 [ 77.011966][ T5097] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 77.043341][ T5103] 9pnet: p9_errstr2errno: server reported unknown error [ 77.087504][ T5105] netlink: 196 bytes leftover after parsing attributes in process `syz.3.657'. [ 77.204461][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 77.204479][ T30] audit: type=1400 audit(1749576474.577:796): avc: denied { read } for pid=5114 comm="syz.3.661" path="socket:[9748]" dev="sockfs" ino=9748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.498063][ T5132] loop1: detected capacity change from 0 to 512 [ 77.526285][ T5132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.556075][ T5132] EXT4-fs (loop1): 1 truncate cleaned up [ 77.581480][ T5132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.620092][ T5139] loop4: detected capacity change from 0 to 512 [ 77.674003][ T5139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.701225][ T5139] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.770706][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.810452][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.895255][ T30] audit: type=1400 audit(1749576475.305:797): avc: denied { setopt } for pid=5146 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.981826][ T5153] syzkaller0: entered promiscuous mode [ 77.987949][ T5153] syzkaller0: entered allmulticast mode [ 78.001076][ T5151] vlan2: entered allmulticast mode [ 78.007741][ T5151] bridge_slave_0: entered allmulticast mode [ 78.031677][ T30] audit: type=1400 audit(1749576475.453:798): avc: denied { mounton } for pid=5160 comm="syz.0.680" path="/84/file0" dev="configfs" ino=1575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.061119][ T30] audit: type=1400 audit(1749576475.453:799): avc: denied { mount } for pid=5160 comm="syz.0.680" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.088514][ T30] audit: type=1400 audit(1749576475.453:800): avc: denied { unmount } for pid=5160 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.139140][ T30] audit: type=1400 audit(1749576475.569:801): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 78.246952][ T30] audit: type=1400 audit(1749576475.675:802): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.274126][ T30] audit: type=1400 audit(1749576475.675:803): avc: denied { search } for pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.305484][ T30] audit: type=1400 audit(1749576475.675:804): avc: denied { search } for pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.333986][ T30] audit: type=1400 audit(1749576475.675:805): avc: denied { read } for pid=3038 comm="dhcpcd" name="n26" dev="tmpfs" ino=3340 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.677193][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 78.738168][ T5225] loop1: detected capacity change from 0 to 1024 [ 78.786984][ T5225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.826190][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.847499][ T5241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.705'. [ 78.857133][ T5241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.705'. [ 79.599856][ T5306] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 80.481437][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5351 comm=syz.3.751 [ 80.571358][ T5355] gretap0: entered promiscuous mode [ 80.600054][ T5355] vlan0: entered promiscuous mode [ 80.642575][ T5367] loop3: detected capacity change from 0 to 512 [ 80.682911][ T5371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 80.702923][ T5367] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.736852][ T5367] EXT4-fs (loop3): 1 truncate cleaned up [ 80.747357][ T5367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.852054][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.912712][ T2999] udevd[2999]: worker [3643] terminated by signal 33 (Unknown signal 33) [ 80.933755][ T2999] udevd[2999]: worker [3643] failed while handling '/devices/virtual/block/loop3' [ 81.024129][ T5399] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.772'. [ 81.049623][ T5407] loop1: detected capacity change from 0 to 512 [ 81.102600][ T5407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.126263][ T5407] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.170494][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.197189][ T5412] loop2: detected capacity change from 0 to 512 [ 81.230618][ T5412] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.778: bad orphan inode 15 [ 81.276129][ T5412] ext4_test_bit(bit=14, block=5) = 0 [ 81.290446][ T5422] netlink: 88 bytes leftover after parsing attributes in process `syz.1.782'. [ 81.312519][ T5412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.330342][ T5420] loop3: detected capacity change from 0 to 1024 [ 81.340611][ T5420] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 81.361748][ T5420] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 81.376506][ T2999] udevd[2999]: worker [3704] terminated by signal 33 (Unknown signal 33) [ 81.377201][ T5420] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.781: iget: special inode unallocated [ 81.396469][ T2999] udevd[2999]: worker [3704] failed while handling '/devices/virtual/block/loop3' [ 81.400866][ T5420] EXT4-fs (loop3): no journal found [ 81.416717][ T5420] EXT4-fs (loop3): can't get journal size [ 81.423736][ T5420] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.781: iget: special inode unallocated [ 81.443404][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.452329][ T5420] EXT4-fs (loop3): get root inode failed [ 81.463072][ T5420] EXT4-fs (loop3): mount failed [ 81.478481][ T5425] loop1: detected capacity change from 0 to 2048 [ 81.499199][ T2999] udevd[2999]: worker [3299] terminated by signal 33 (Unknown signal 33) [ 81.509389][ T2999] udevd[2999]: worker [3299] failed while handling '/devices/virtual/block/loop1' [ 81.525166][ T5425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.580520][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.593465][ T5431] Falling back ldisc for ptm0. [ 81.598724][ T5430] loop4: detected capacity change from 0 to 2048 [ 81.656494][ T5438] syzkaller1: entered promiscuous mode [ 81.662841][ T5438] syzkaller1: entered allmulticast mode [ 81.672131][ T5435] loop4: p1 < > p4 [ 81.681450][ T5435] loop4: p4 size 8388608 extends beyond EOD, truncated [ 81.708777][ T5430] loop4: p1 < > p4 [ 81.717765][ T5430] loop4: p4 size 8388608 extends beyond EOD, truncated [ 81.849594][ T5435] udevd[5435]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 81.849636][ T3601] udevd[3601]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.880156][ T5457] loop1: detected capacity change from 0 to 1024 [ 81.887794][ T5457] EXT4-fs: Ignoring removed bh option [ 81.895515][ T5457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.954755][ T5457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.997890][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 81.997907][ T30] audit: type=1400 audit(1749576479.644:891): avc: denied { read } for pid=5456 comm="syz.1.793" path="/174/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.055004][ T30] audit: type=1400 audit(1749576479.687:892): avc: denied { create } for pid=5469 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 82.106672][ T5477] serio: Serial port ptm0 [ 82.199457][ T5480] loop4: detected capacity change from 0 to 2048 [ 82.266368][ T5480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.348251][ T30] audit: type=1400 audit(1749576480.014:893): avc: denied { listen } for pid=5492 comm="syz.3.803" lport=37266 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.417901][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.430443][ T30] audit: type=1400 audit(1749576480.056:894): avc: denied { accept } for pid=5492 comm="syz.3.803" lport=37266 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.457877][ T30] audit: type=1400 audit(1749576480.056:895): avc: denied { create } for pid=5479 comm="syz.4.800" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.480141][ T30] audit: type=1400 audit(1749576480.067:896): avc: denied { add_name } for pid=5479 comm="syz.4.800" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.502779][ T30] audit: type=1400 audit(1749576480.067:897): avc: denied { remove_name } for pid=5479 comm="syz.4.800" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.527246][ T30] audit: type=1400 audit(1749576480.067:898): avc: denied { rename } for pid=5479 comm="syz.4.800" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.550346][ T30] audit: type=1400 audit(1749576480.067:899): avc: denied { reparent } for pid=5479 comm="syz.4.800" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.705234][ T30] audit: type=1326 audit(1749576480.299:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.2.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b6fe929 code=0x7ffc0000 [ 82.837673][ T5523] loop3: detected capacity change from 0 to 512 [ 82.905457][ T5523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.921555][ T5523] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.012543][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.060763][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.155345][ T5543] vhci_hcd: invalid port number 224 [ 83.594011][ T5571] C: renamed from team_slave_0 [ 83.626205][ T5571] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 83.635398][ T5571] netlink: 152 bytes leftover after parsing attributes in process `syz.2.831'. [ 83.645110][ T5571] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 83.977281][ T5598] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 84.267143][ T5620] wireguard0: entered promiscuous mode [ 84.273678][ T5620] wireguard0: entered allmulticast mode [ 84.445547][ T5627] SELinux: ebitmap: truncated map [ 84.468130][ T5627] SELinux: failed to load policy [ 84.544063][ T5638] loop1: detected capacity change from 0 to 512 [ 84.573667][ T5638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.634151][ T5638] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.772015][ T5657] loop2: detected capacity change from 0 to 512 [ 84.803165][ T5657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.831877][ T5657] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.871260][ T5656] loop3: detected capacity change from 0 to 128 [ 84.897894][ T5656] vfat: Unknown parameter '0xffffffffffffffff' [ 84.939006][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.959251][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.977564][ T5662] vhci_hcd: invalid port number 224 [ 85.098665][ T5674] loop3: detected capacity change from 0 to 128 [ 85.198714][ T5682] syz.3.871: attempt to access beyond end of device [ 85.198714][ T5682] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 85.268817][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 85.283990][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.309764][ T5682] syz.3.871: attempt to access beyond end of device [ 85.309764][ T5682] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 85.440517][ T5682] syz.3.871: attempt to access beyond end of device [ 85.440517][ T5682] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 85.529648][ T5682] syz.3.871: attempt to access beyond end of device [ 85.529648][ T5682] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 85.581711][ T5692] syz.3.871: attempt to access beyond end of device [ 85.581711][ T5692] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 85.672508][ T5692] syz.3.871: attempt to access beyond end of device [ 85.672508][ T5692] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 85.727050][ T5674] syz.3.871: attempt to access beyond end of device [ 85.727050][ T5674] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 85.763777][ T5682] syz.3.871: attempt to access beyond end of device [ 85.763777][ T5682] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 85.815196][ T5692] syz.3.871: attempt to access beyond end of device [ 85.815196][ T5692] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 85.867970][ T5674] syz.3.871: attempt to access beyond end of device [ 85.867970][ T5674] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 86.183650][ T5739] tipc: Started in network mode [ 86.188953][ T5739] tipc: Node identity 4, cluster identity 4711 [ 86.195762][ T5739] tipc: Node number set to 4 [ 86.280475][ T5746] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 86.359698][ T5746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.517121][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 86.543453][ T5759] syzkaller0: entered promiscuous mode [ 86.550134][ T5759] syzkaller0: entered allmulticast mode [ 86.648655][ T5770] netlink: 'syz.4.910': attribute type 2 has an invalid length. [ 86.657723][ T5770] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 86.666883][ T5770] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.910'. [ 86.772080][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 86.772098][ T30] audit: type=1400 audit(1749576484.679:1000): avc: denied { listen } for pid=5778 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.941881][ T5788] loop2: detected capacity change from 0 to 128 [ 86.957894][ T5789] netlink: 96 bytes leftover after parsing attributes in process `syz.3.917'. [ 87.030563][ T30] audit: type=1326 audit(1749576484.953:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.072615][ T30] audit: type=1326 audit(1749576484.953:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.102477][ T30] audit: type=1326 audit(1749576484.953:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.128673][ T30] audit: type=1326 audit(1749576484.953:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.154967][ T30] audit: type=1326 audit(1749576484.953:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.184540][ T30] audit: type=1326 audit(1749576484.953:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.215745][ T30] audit: type=1326 audit(1749576484.953:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.242682][ T30] audit: type=1326 audit(1749576484.953:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.268802][ T30] audit: type=1326 audit(1749576484.953:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5792 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa472d5e929 code=0x7ffc0000 [ 87.317267][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 87.334021][ T5802] IPVS: stopping master sync thread 5800 ... [ 87.345091][ T5800] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 87.369045][ T5801] 8021q: adding VLAN 0 to HW filter on device team1 [ 87.485272][ T5806] loop3: detected capacity change from 0 to 8192 [ 87.508479][ T5806] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.550590][ T5812] loop2: detected capacity change from 0 to 164 [ 87.565133][ T5812] rock: directory entry would overflow storage [ 87.572829][ T5812] rock: sig=0x4543, size=28, remaining=18 [ 87.699355][ T5816] loop3: detected capacity change from 0 to 512 [ 87.719262][ T5816] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.741084][ T5816] EXT4-fs (loop3): mount failed [ 87.840118][ T5829] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.932'. [ 87.852087][ T5822] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 87.971090][ T5842] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.940'. [ 87.984194][ T5840] netlink: 'syz.4.939': attribute type 13 has an invalid length. [ 87.985572][ T5842] netlink: zone id is out of range [ 87.999225][ T5842] netlink: del zone limit has 8 unknown bytes [ 88.124889][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 88.166884][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.179866][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.261994][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.308976][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.395682][ T5840] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.406906][ T5840] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.418619][ T5840] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.428733][ T5840] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.448157][ T5872] loop2: detected capacity change from 0 to 256 [ 88.473321][ T5872] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.506937][ T5872] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 88.518028][ T5872] FAT-fs (loop2): Filesystem has been set read-only [ 88.727060][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 88.831743][ T5885] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 89.147105][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 89.227685][ T5919] loop3: detected capacity change from 0 to 1024 [ 89.238532][ T5919] EXT4-fs: Ignoring removed bh option [ 89.244846][ T5919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.271241][ T5919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.722313][ T5926] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 89.730802][ T5926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.739834][ T5926] vhci_hcd vhci_hcd.0: Device attached [ 89.764829][ T5926] program syz.2.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.823337][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 89.826107][ T5927] vhci_hcd: connection closed [ 89.833490][ T12] vhci_hcd: stop threads [ 89.843833][ T12] vhci_hcd: release socket [ 89.848800][ T12] vhci_hcd: disconnect device [ 89.902784][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 89.991216][ T5922] ================================================================== [ 90.000370][ T5922] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 90.009456][ T5922] [ 90.011953][ T5922] write to 0xffff8881179b9e28 of 8 bytes by task 5919 on cpu 0: [ 90.020156][ T5922] filemap_splice_read+0x47e/0x6b0 [ 90.025614][ T5922] ext4_file_splice_read+0x8f/0xb0 [ 90.031887][ T5922] splice_direct_to_actor+0x26c/0x680 [ 90.037615][ T5922] do_splice_direct+0xda/0x150 [ 90.043242][ T5922] do_sendfile+0x380/0x650 [ 90.048061][ T5922] __x64_sys_sendfile64+0x105/0x150 [ 90.053843][ T5922] x64_sys_call+0xb39/0x2fb0 [ 90.059547][ T5922] do_syscall_64+0xd2/0x200 [ 90.065462][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.072466][ T5922] [ 90.075207][ T5922] write to 0xffff8881179b9e28 of 8 bytes by task 5922 on cpu 1: [ 90.084270][ T5922] filemap_splice_read+0x47e/0x6b0 [ 90.090566][ T5922] ext4_file_splice_read+0x8f/0xb0 [ 90.096341][ T5922] splice_direct_to_actor+0x26c/0x680 [ 90.102091][ T5922] do_splice_direct+0xda/0x150 [ 90.107416][ T5922] do_sendfile+0x380/0x650 [ 90.112125][ T5922] __x64_sys_sendfile64+0x105/0x150 [ 90.117741][ T5922] x64_sys_call+0xb39/0x2fb0 [ 90.122732][ T5922] do_syscall_64+0xd2/0x200 [ 90.128693][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.134991][ T5922] [ 90.137596][ T5922] value changed: 0x0000000000000735 -> 0x0000000000000736 [ 90.146732][ T5922] [ 90.149397][ T5922] Reported by Kernel Concurrency Sanitizer on: [ 90.156418][ T5922] CPU: 1 UID: 0 PID: 5922 Comm: syz.3.968 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 90.170394][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.181338][ T5922] ================================================================== [ 90.351647][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.